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DATE/PREPARER: TAP Topic Page Classification Screen Number 
(U) Module TOP SECRETHESMINTINGOFSRN- 1 of 11 
Introduction 
FRAME ID: 2010 
(U) MODULE 2 


NEXT FRAME ID: 2020 (FSHSHANF) BR and PR/TT Metadata 


(U) This module will enable you to: 
e = 6(FSHSIANF) Distinguish differences between BR and PR/TT metadata 


e (FSHSIHNF) Recognize restrictions placed on BR and PR/TT metadata storage and retention by the 
BR and PR/TT Bulk Metadata Programs 


GRAPHIC/AV: 
(U) Present learning objectives in the travel 
journal 


~FSHSIENE) (OGC Attorney): During this part of our trip we discuss the BR and PR/TT metadata in greater detail. Specifically, we look at the metadata 
which may be obtained, how bulk metadata is collected under these authorities, and the storage restrictions with which NSA must comply. Other modules 
will address restrictions related to the dissemination and processing of the bulk metadata. 


(U) This module will enable you to: 
e <FSHSIANF) Distinguish differences between BR and PR/TT metadata 
e (TSUSIYNF) Recognize restrictions placed on BR and PR/TT metadata storage and retention by the BR and PR/TT Bulk Metadata Programs 


(ESHSIINF) Note that other restrictions will be addressed in other modules. 


Derived From: NSA/CSSM 1-52 
Dated: 20070108 
Declassify On: 26336301 
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BR and PR/TT Metadata ee ee ee 


FRAME ID: 2020 


NEXT FRAME ID: 2030 


BACK FRAME ID: 2010 


ALT TAG: 


GRAPHIC/AV: 
(U) Possible cutaway images may include: 
e Image depicting telephony and 
internet communications 


- One of the key differences between BR and PR/TT metadata is the type of metadata that each Order_permits NSA to obtain 
This lesson will focus specifically on the kinds of metadata and 
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FRAME ID: 2030 


NEXT FRAME ID: 2040 
+FSHSHINF} These Business Records 
Include Examples Such As: 


i e Originating and terminating telephone 
BACK FRAME ID: 2020 numbers 


ALT TAG: e IMSI 
e IMEI 
GRAPHIC/AV: e Trunk identifiers 
(U) Possible cutaway images may include: e Telephone calling card numbers 
e images pertinent to 
telecommunications and records, 
messaging such as billing 


(FSHSIENF) (OGC Attorney): Let's take a look at the BR Bulk Metadata Program. As we mentioned in Module 1, the BR Primary Order pertains specifically 
to telephony metadata which is kept by U.S.-based telecommunications companies as part of their normal business operations. They retain this 
information, in part, so they can send their subscribers a bill every month. 

(FSHSIHNE) The business records include, for example, originating and terminating telephone numbers, International Mobile Subscriber Identity (IMSI), 
International Mobile Station Equipment Identity (IMEI), trunk identifiers, and telephone calling card numbers. 
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Program (cont.) -SEGREHIGCOMINA-HNOGFORN- 


FRAME ID: 2040 


NEXT FRAME ID: 2050 


+FSHSHINF) These Business 


Records Do Not Include: 
BACK FRAME ID: 2030 er 


ALT TAG: e Content of any communication 
i e Name, address, or financial 
GRAPHIC/AV: information of a subscriber or 
(U) Possible cutaway images may include: customer 
e images pertinent to querying 
metadata producing contact 


chaining diagrams and other query 
formats 


+TSASHANF}{OGC Attorney): As you can imagine, NSA is interested in the same kinds of telephony information for and contact chaining 
analysis. Because these business records, also known as call detail records ee are retained s the U.S.-based telecommunication companies as part 
of their normal business operations. However. the FISC stipulates that we are not 


permitted to obtain the content of an of a subscriber or customer. 
NE} Next we will take a 3 PR/TT Bulk Meta jata Program, which allows NSA to collect internet communications metadata 
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FRAME ID: 2050 


NEXT FRAME ID: 2060 


BACK FRAME ID: 2040 
ALT TAG: 


GRAPHIC/AV: 


(FS4SIHNF) Possible cutaway images may 
include: 


èe images that depict 


-~FSHSIANF) (OGC Attorney): In the case of Internet communications, there are no easily accessible comparable business records that could provide NSA 


with the kind of information in which we are interested. Subscribers do_not receive_a_bill based_on_ who they email EEE In_oider to_acauire the bulk 
metadata for internet communications, the FISC permits NSA to 


PR/TT metadata and forward it back to NSA for analysis. 


(TS//SI//NE) As we discussed in Module 1, NSA is not permitted to collect communications content under either of these Orders, so I 
in such a way as to exclude content. 
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FRAME ID: 2060 


CFSHSIHNF? For example, FISC requirements that affect PR/TT include: 
Which U.S.-based telecommunications | 
The specific 
The types of N 2 d 
Which specif 


NEXT FRAME ID: 2070 


BACK FRAME ID: 2050 
ALT TAG: 


GRAPHIC/AV: 


CFSHSIENF) (OGC Attorney): The FISC goes into great detail in the Orders about many aspects of the collection to provide reasonable assurance that NSA 
is not overreaching its authority. 


(FSHSIHNF) For example, FISC requirements that affect PR/TT inglude- 
Which U.S.-based telecommunications 

The specific 
The types yof 21 


Which specifia 
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FRAME ID: 2070 
(REMOVE THE CLICK HERE BUTTON FROM THE PROGRAMMED MODULE) 


NEXT FRAME ID: 2080 


BACK FRAME ID: 2060 


ALT TAG: 


GRAPHIC/AV: 


(U) Possible cutaway images may include: 


ing some metadata 
d from a batch of 
data — illustrating an 


(TS//SI//NE) In addition. 
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FRAME ID: 2080 
(REMOVE THE CLICK HERE BUTTON FROM THE PROGRAMMED MODULE) 


NEXT FRAME ID: 2090 


BACK FRAME ID: 2070 
ALT TAG: 


GRAPHIC/AV: 


(U) Possible cutaway images may include 


COS#SH4NB Keep in mind that this PRAT metadata is 
we will talk about the storage of both the BR and PR/TT metadata 
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FRAME ID: 2090 


NEXT FRAME ID: 2100 


|BACKFRAMEID:2080 FRAME ID: 2080 
ae TAG: 


a 
(U) Possible cutaway images may include: 


e images pertinent to storage 


-~FSHSIENE) (OGC Attorney): Both Orders mandate that the BR and PR/TT bulk metadata must be stored in repositories within secure networks under 
NSA’s control. The methods for storing the resuits of approved queries of the bulk metadata will be explained in Module 4. BR and PR/TT bulk metadata 
may only be stored in authorized and specifically designated repositories, 


+FSHSIYNE)- The FISC also requires NSA to mark and tag the BR and PR/TT metadata so that software and other control mechanisms may provide 
reasonable assurance that the information is only accessed by authorized personnel who have completed the required training and have the necessary 
credentials. 


4{TSHYSI/NE) The bulk BR and PR/TT metadata coming into the repositories has an expiration date set by the FISC. NSA does not have the authority to 
maintain the unselected BR and PR/TT metadata indefinitely. The FISC permits NSA to maintain this metadata for 60 months from the date of collection at 
which time it must be destroyed. 
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FRAME ID: 2100 (U) Knowledge Check 


1-“FSASHANF) Which of the following describe the BR Bulk Metadata Program: 

a) (FSASIANF) The BR Order pertains to telephony metadata which is kept by U.S.-based 
telecommunication companies. 

b) (FS#SHANF) BR refers to Business Records which is information U.S.-based telecommunications 
companies already have in their possession and use as part of their normal business. 

c) (FSHSH/NF}NSA uses Business Record information such as terminating telephone numbers, 
IMSI, IMEI and trunk identifiers for contact chaining analysis. 

d) (U) All of the above. —$$+—- 


NEXT FRAME ID: 2110 


BACK FRAME ID: 2090 


ALT TAG: 


2. {FS#SHNF) Which of the following does not describe the PR/TT Bulk Metadata Program? 


a) 1 S/'S!/\F) i AAE 
b) (TS//SI//NF) only collects limited metadata from the communications of approvec 


GRAPHIC/AV: 


(U) Knowledge checks in the travel journal targets. 


c) (FSHSIHNE) NSA collects specific categories of metadata to include the “to,” “from,” “cc,” and 
“bcc” lines of an email. 
d) (U) None of the above. 


3. (FSHSHANF) Which of the following statements is true? 
(TS#SI#NF) Bulk BR and PR/TT metadata may not be kept for longer than 48 months. 
(FSHSHANF) Non-U.S. person metadata may be kept at NSA indefinitely. 
{(FS#SH/NF} The bulk metadata is tagged to provide reasonable assurance that the data is 
only accessed by authorized personnel. 
(U) All of the above. 
(U) None of the above. 


(U) (OGC Attorney): Let’s check what you remember from this topic! 


ANSWERS: 
Question 1. (FSHSHANF) Correct! All of the above describe the BR Bulk Metadata Program. 
(TS//SI//NF) Incorrect. The correct answer is d). All of the above describe the BR Bulk Metadata Program. 


Question 2. (TS//SI/NE} Correct! It is NOT TR hat forthe PR Bulk Metadata Program NSA only colle imited metadat<: from the communications 
of approved targets. | 
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CFSHSIANE) Incorrect. The correct answer is b) because it is NOT TRUE that for the PR/TT Bulk Metadata Program NSA only collects limited metadata 
from the communications of approved targets. 


Question 3. €FS#SHANF) Right! The bulk metadata is tagged to provide reasonable assurance that the data is only accessed by authorized personnel. 
~<FSHSHANF) Incorrect. The correct answer is c). The bulk metadata is tagged to provide reasonable assurance that the data is only accessed by authorized 
personnel. 
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FRAME ID: 2110 
(U) Now that we have completed this part of your trip, you should be able to: 


e ~(TSASHNPF) Distinguish differences between BR and PR/TT Bulk Metadata 


NEXT FRAME ID: N/A Programs E 
e (TSHYSIINF) Recognize restrictions placed on metadata storage and 


retention by the BR and PR/TT Bulk Metadata Programs 


ALT TAG: 


GRAPHIC/AV: 
(U) Review learning objectives in the travel 
journal 


(U) (OGC Attorney): Now that we have completed this part of our trip, you should be able to: 
e (FSHSWHNS) Distinguish differences between BR and PR/TT Bulk Metadata Programs 
e (FSHSIENF) Recognize restrictions placed on metadata storage and retention by the BR and PR/TT Bulk Metadata Programs 


-~(FSHSIENE) During the next portion of our trip, we will meet up with Marvin who will talk to us about the Reasonable Articulable Suspicion (RAS) standard 
and the requirements that must be met in order to query the bulk metadata. 
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